#!

# Activate for antivirus "default-db", "greyware" as "heuristic".
#
# NOTE: size limit of antivirus is configured within the profile
#       "config firewall profile-protocol-options".

###########################
# Antivirus Settings 
###########################
config antivirus settings
set default-db extended
set grayware enable
end
#
# Enable Heuristig but do not block
# by default disabled
#
config antivirus heuristic
set mode pass
end
###########################
# Antivirus Settings Profile 
###########################
config antivirus profile
edit mydomain1-default.local
set comment "Scan and delete default profile mydomain1.ch" 
unset replacemsg-group
set inspection-mode proxy
set mobile-malware-db disable 
config http
set options scan quarantine
# set archive-block zip
set archive-log corrupted encrypted mailbomb multipart nested unhandled
set emulator enable
end
config ftp
set options scan quarantine
# set archive-block zip
set archive-log corrupted encrypted mailbomb multipart nested unhandled
set emulator enable
end
config imap
set options scan quarantine
# set archive-block zip
set archive-log corrupted encrypted mailbomb multipart nested unhandled
set emulator enable
set executables default
end
config pop3
set options scan quarantine
# set archive-block zip
set archive-log corrupted encrypted mailbomb multipart nested unhandled
set emulator enable
set executables default
end
config smtp
set options scan quarantine
# set archive-block zip
set archive-log corrupted encrypted mailbomb multipart nested unhandled
set emulator enable
set executables default
end
config mapi
set options scan quarantine
# set archive-block zip
set archive-log corrupted encrypted mailbomb multipart nested unhandled
set emulator enable
set executables default
end
config nntp
set options scan quarantine
# set archive-block zip
set archive-log corrupted encrypted mailbomb multipart nested unhandled
set emulator enable
end
config nac-quar
set infected none     
set log enable
end
set av-virus-log enable 
set av-block-log enable
end
###########################
# Antivirus Settings Quarantine 
###########################
config antivirus quarantine 
#set agelimit 168
set maxfilesize 5
#set lowspace ovrw-old
unset quarantine-quota
set store-infected imap smtp pop3 http ftp imaps smtps pop3s https ftps mapi
set store-blocked imap smtp pop3 http ftp imaps smtps pop3s ftps mapi
set store-heuristic imap smtp pop3 http ftp nntp imaps smtps pop3s https ftps mapi  
set destination FortiAnalyzer
end

